com.coralogix.zio.k8s.model.admissionregistration.v1
WebhookClientConfig
Companion object WebhookClientConfig
case class WebhookClientConfig(caBundle: Optional[Chunk[Byte]] = Optional.Absent, service: Optional[ServiceReference] = Optional.Absent, url: Optional[String] = Optional.Absent) extends Product with Serializable
WebhookClientConfig contains the information to make a TLS connection with the webhook
- caBundle
caBundle
is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.- url
url
gives the location of the webhook, in standard URL form (scheme://host:port/path
). Exactly one ofurl
orservice
must be specified. Thehost
should not refer to a service running in the cluster; use theservice
field instead. The host might be resolved via external DNS in some apiservers (e.g.,kube-apiserver
cannot resolve in-cluster DNS as that would be a layering violation).host
may also be an IP address. Please note that usinglocalhost
or127.0.0.1
as ahost
is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. The scheme must be "https"; the URL must begin with "https://". A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
- Alphabetic
- By Inheritance
- WebhookClientConfig
- Serializable
- Serializable
- Product
- Equals
- AnyRef
- Any
- Hide All
- Show All
- Public
- All
Instance Constructors
-
new
WebhookClientConfig(caBundle: Optional[Chunk[Byte]] = Optional.Absent, service: Optional[ServiceReference] = Optional.Absent, url: Optional[String] = Optional.Absent)
- caBundle
caBundle
is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.- url
url
gives the location of the webhook, in standard URL form (scheme://host:port/path
). Exactly one ofurl
orservice
must be specified. Thehost
should not refer to a service running in the cluster; use theservice
field instead. The host might be resolved via external DNS in some apiservers (e.g.,kube-apiserver
cannot resolve in-cluster DNS as that would be a layering violation).host
may also be an IP address. Please note that usinglocalhost
or127.0.0.1
as ahost
is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. The scheme must be "https"; the URL must begin with "https://". A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
Value Members
- val caBundle: Optional[Chunk[Byte]]
-
def
getCaBundle: IO[K8sFailure, Chunk[Byte]]
caBundle
is a PEM encoded CA bundle which will be used to validate the webhook's server certificate.caBundle
is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.If the field is not present, fails with com.coralogix.zio.k8s.client.UndefinedField.
-
def
getService: IO[K8sFailure, ServiceReference]
Gets service.
Gets service.
If the field is not present, fails with com.coralogix.zio.k8s.client.UndefinedField.
-
def
getUrl: IO[K8sFailure, String]
url
gives the location of the webhook, in standard URL form (scheme://host:port/path
).url
gives the location of the webhook, in standard URL form (scheme://host:port/path
). Exactly one ofurl
orservice
must be specified.The
host
should not refer to a service running in the cluster; use theservice
field instead. The host might be resolved via external DNS in some apiservers (e.g.,kube-apiserver
cannot resolve in-cluster DNS as that would be a layering violation).host
may also be an IP address.Please note that using
localhost
or127.0.0.1
as ahost
is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.The scheme must be "https"; the URL must begin with "https://".
A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.
Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
If the field is not present, fails with com.coralogix.zio.k8s.client.UndefinedField.
- val service: Optional[ServiceReference]
- val url: Optional[String]